Privacy Policy
Last updated 24 October 2026
This policy explains which personal data Serial Passport collects, why, and what rights you have. It applies to our website, the customer dashboard and the public passport pages.
1. Who we are
Serial Passport is operated by [COMPANY LEGAL NAME], [ADDRESS], registered with the Dutch Chamber of Commerce (KvK) under number [KVK NUMBER]. For the personal data described in section 2 we are the controller. You can reach us at legal@serialpassport.com.
2. What we collect
| Data | When | Why | Legal basis (GDPR) |
|---|---|---|---|
| Company name, work email, battery category, yearly volume | You request a pilot | To answer your request and prepare an offer | Steps before a contract, Art. 6(1)(b) |
| Name, work email, role, login activity | You or your employer create a dashboard account | To provide and secure the service | Contract, Art. 6(1)(b); security, Art. 6(1)(f) |
| Billing contact and invoice details | You become a paying customer | Invoicing and bookkeeping | Legal obligation, Art. 6(1)(c) |
| Name of the organisation and person viewing restricted passport data | A verified party opens level 2 or 3 data | Access logging required to protect restricted data | Legitimate interest, Art. 6(1)(f) |
| Technical data (IP address, browser, time of request) | Any visit | Security and abuse prevention; kept in server logs | Legitimate interest, Art. 6(1)(f) |
Public battery passport pages contain product data published by manufacturers under Regulation (EU) 2023/1542. That data is normally not personal data. Where a customer adds personal data to a passport (for example the name of a technician in a repair note), we process it on the customer's behalf as a processor under a data processing agreement.
3. Who receives your data
We only share personal data with service providers that help us run Serial Passport, under written agreements:
- Hosting and database: [HOSTING PROVIDER], data stored in the European Union
- Email delivery: [EMAIL PROVIDER]
- Payments: [PAYMENT PROVIDER]
We never sell personal data and we do not use it for advertising.
4. Transfers outside the EU
We store and process data in the European Economic Area. If a provider ever needs to process data outside the EEA, we use the European Commission's standard contractual clauses or another valid transfer mechanism, and we will update this policy.
5. How long we keep data
- Pilot requests: 12 months after our last contact if no contract follows
- Account data: for the duration of the contract, then deleted within 90 days
- Invoices and bookkeeping records: 7 years, as required by Dutch tax law
- Access logs for restricted passport data: as long as the passport exists
- Server logs: 30 days
6. Your rights
You can ask us for access to, correction or deletion of your personal data, ask us to restrict processing, object to processing based on legitimate interest, and receive your data in a portable format. Email legal@serialpassport.com. We reply within one month.
You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own EU country.
7. Cookies
We only use what is strictly necessary to run the site. See our Cookie Policy.
8. Security
We protect data with encryption in transit, access control, two-factor login and logged access to restricted data. See Security for details and how to report a vulnerability.
9. Changes
We will update this page when our processing changes and notify customers by email about material changes.